Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a633030303a3a2f33342d3334203d3e20323638343834.roa
File:                     323830343a353165383a633030303a3a2f33342d3334203d3e20323638343834.roa (raw, json)
Hash identifier:          0WgKyf2hTEkMw4xBqFoLqtGkhAdCCJt9K6X2M/niJGI=
Subject key identifier:   83:B0:F2:1C:83:00:59:07:C5:6D:37:53:B7:2A:8F:A6:0F:6E:90:D9
Certificate issuer:       /CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
Certificate serial:       7AACE6F6F20A19F2E532A04374050E1614B6A33D
Authority key identifier: 47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a633030303a3a2f33342d3334203d3e20323638343834.roa
Signing time:             Tue 23 Jun 2026 01:25:21 +0000
ROA not before:           Tue 23 Jun 2026 01:20:21 +0000
ROA not after:            Tue 22 Jun 2027 01:25:21 +0000
asID:                     268484
IP address blocks:        2804:51e8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl
                          rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 05:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ac:e6:f6:f2:0a:19:f2:e5:32:a0:43:74:05:0e:16:14:b6:a3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
        Validity
            Not Before: Jun 23 01:20:21 2026 GMT
            Not After : Jun 22 01:25:21 2027 GMT
        Subject: CN=83B0F21C83005907C56D3753B72A8FA60F6E90D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:67:3d:62:18:79:41:b1:b0:06:c0:55:40:
                    a3:a7:b4:76:2f:82:06:4b:cf:56:52:0a:02:7b:89:
                    00:cd:84:dc:ee:5c:df:03:94:d4:c5:e1:31:5f:3c:
                    5f:b3:14:83:8f:61:9c:98:97:6e:29:0b:bd:6e:1e:
                    16:67:32:f7:b4:11:48:82:b5:de:25:84:fc:fd:00:
                    72:ca:ab:7b:11:69:dd:27:87:24:5e:44:a1:b8:69:
                    c9:0f:f5:b0:fd:ec:9a:62:cc:6c:3e:19:e8:48:8c:
                    82:d9:19:c1:7c:03:83:88:25:4b:63:59:79:51:c8:
                    97:be:81:fe:22:f9:c7:14:53:96:ba:86:9b:bc:cb:
                    39:43:ba:c4:ff:30:7c:7d:da:89:6b:f2:cc:2c:63:
                    8e:42:9b:4f:77:84:3d:0c:6e:d1:f1:7b:1f:c3:05:
                    35:da:7a:ce:ff:6d:9e:34:b8:2b:0d:d8:b3:15:4c:
                    7c:49:3c:25:72:05:80:e8:82:98:07:4f:dd:33:ac:
                    06:bc:ad:af:5f:ee:a2:95:41:02:4b:55:41:99:57:
                    f2:0c:65:0e:10:8a:eb:a6:02:1d:e1:e6:0f:c4:9e:
                    d4:28:83:0d:5b:f7:68:fe:2e:f1:1a:77:b7:d7:2b:
                    52:62:55:88:2e:04:1b:ff:5b:7b:c8:dc:1f:96:bb:
                    a5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B0:F2:1C:83:00:59:07:C5:6D:37:53:B7:2A:8F:A6:0F:6E:90:D9
            X509v3 Authority Key Identifier:
                keyid:47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a633030303a3a2f33342d3334203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         e1:ce:d9:d4:85:4f:98:01:68:c8:6e:75:da:a3:72:4f:11:84:
         d0:15:1d:8c:19:ac:cc:1e:3d:13:e6:e4:46:0a:40:38:69:e7:
         ee:0c:2c:10:2c:8b:91:2b:ec:71:28:87:10:d8:d6:b0:5a:af:
         fa:9a:cf:2a:f6:bf:97:9d:1c:17:40:6a:b2:9b:39:7d:63:0a:
         0e:1c:4e:4d:72:09:4e:9d:cd:b8:47:01:aa:14:e3:b9:d3:eb:
         7f:5a:55:f8:90:d2:dc:e5:d1:0d:81:61:a0:34:9d:22:56:15:
         e4:81:f4:bf:f0:56:44:0b:d4:64:68:82:91:6d:7b:38:1a:43:
         83:12:a9:c0:94:21:1d:45:6d:1b:23:37:2d:53:62:16:28:b8:
         98:82:e5:a4:e9:6e:ea:9a:28:65:94:39:98:d4:14:b8:96:fc:
         4f:05:47:e2:68:a0:c8:c1:e6:6b:55:50:68:ad:04:95:d1:33:
         5c:44:da:98:dc:69:58:17:87:17:a7:0c:52:f9:6e:b4:a7:19:
         8e:7d:d4:9f:4e:31:0d:02:73:15:3f:e2:2d:e0:33:69:90:f8:
         a3:1f:d4:69:9f:60:0a:f9:c3:bd:b8:51:13:37:69:c7:7a:d7:
         2f:40:ef:e5:b2:25:39:12:43:31:59:a8:6f:81:29:fc:2d:06:
         f8:ae:d1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:11 2026 by rpki-client